CW CT AC

How would you monitor your EC2 instance memory usage in CloudWatch?

• Enable EC2 Detailed Monitoring

• By default, the EC2 instance pushes memory usage to CloudWatch

• Use the Unified CloudWatch Agent to push memory usage as a custom metric to CloudWatch

You have made a configuration change and would like to evaluate the impact of it on the performance of your application. Which AWS service should you use?

• Amazon CloudWatch

• AWS CloudTrail

• AWS Config

Answer explanation

Amazon CloudWatch is a monitoring service that allows you to monitor your applications, respond to system-wide performance changes, optimize resource utilization, and get a unified view of operational health. It is used to monitor your applications' performance and metrics.

Someone has terminated an EC2 instance in your AWS account last week, which was hosting a critical database that contains sensitive data. Which AWS service helps you find who did that and when?

• CloudWatch Metrics

• CloudWatch Alarms

• CloudWatch Events

• AWS CloudTrail

You have CloudTrail enabled for your AWS Account in all AWS Regions. What should you use to detect unusual activity in your AWS Account?

• CloudTrail Data Events

• CloudTrail Insights

• CloudTrail Management Events

One of your teammates terminated an EC2 instance 4 months ago which has critical data. You don't know who made this so you are going to review all API calls within this period using CloudTrail. You already have CloudTrail set up and configured to send logs to the S3 bucket. What should you do to find out who made this?

• Use CloudTrail Event History in CloudTrail Console

• use Athena to analyze CloudTrail logs stored in S3

You are running a website on a fleet of EC2 instances with OS that has a known vulnerability on port 84. You want to continuously monitor your EC2 instances if they have port 84 exposed. How should you do this?

• Setup CloudWatch Metrics

• Setup CloudTrails

• Setup Config Rules

• Schedule a CloudWatch Event to trigger a lambda function to scan your EC2 instances

You would like to evaluate the compliance of your resource's configurations over time. Which AWS service will you choose?

• AWS Config

• Amazon CloudWatch

• AWS CloudTrail

Someone changed the configuration of a resource and made it non-compliant. Which AWS service can you use to find out who made the change?

• Amazon CloudWatch

• AWS CloudTrail

• AWS Config

You have enabled AWS Config to monitor Security Groups if there's unrestricted SSH access to any of your EC2 instances. Which AWS Config feature can you use to automatically re-configure your Security Groups to their correct state?

• AWS Config Remediations

• AWS Config Rules

• AWS Config Notifications

You are running a critical website on a set of EC2 instances with a tightened Security Group that has restricted SSH access. You have enabled AWS Config in your AWS Region and you want to be notified via email when someone modified your EC2 instances' Security Group. Which AWS Config feature helps you do this?

• AWS Config Remediations

• AWS Config Rules

• AWS Config Notifications